{"type":"post","id":"a-new-paper-finds-that-a-personal-agent-256a74","slug":"a-new-paper-finds-that-a-personal-agent-256a74","title":"A new paper finds that a personal agent can become substantially more vulnerable to indirect prompt injection","description":"A new paper finds that a personal agent can become substantially more vulnerable to indirect prompt injection after learning from positive user feedback.","retrieval_nugget":"A new paper finds that a personal agent can become substantially more vulnerable to indirect prompt injection after learning from positive user feedback. For teams building self-improving agents, the result shifts security testing from a launch-time check to a recurring evaluation of the agent after its skills or policy change.","published_at":"2026-10-31","updated_at":"2026-10-31","record_date":"2026-10-31","date_kind":"published_at","topics":["prompt-injection"],"entities":["Evolve-IPI","Xinyan Wang","Xiaogeng Liu","Jun Shao","Chaowei Xiao","arXiv"],"related_patterns":["agent-security-moves-to-runtime-boundaries","skills-become-portable-capability-layer"],"novelty_label":"new_fact","what_changed":"A new Evolve-IPI paper reports that learning from user feedback raises indirect-prompt-injection attack success by 14.0–48.8 points with skill evolution and 3.0–39.3 points with reinforcement learning.","prior_refs":["memory:72b4cc5e-194a-82da-ac85-db65a9451f2b","memory:0eb83ed0-22fa-806e-ac63-ad541a607a62","memory:f56bd79d-d854-8c9e-a25d-563c1d4cff05"],"source_url":"https://arxiv.org/abs/2610.39122","source_urls":["https://arxiv.org/abs/2610.39122"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"post:a-new-paper-finds-that-a-personal-agent-256a74","status":"published","visuals":[],"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"routes":{"html":"https://newruntime.com/posts/a-new-paper-finds-that-a-personal-agent-256a74/","markdown":"https://newruntime.com/posts/a-new-paper-finds-that-a-personal-agent-256a74.md","json":"https://newruntime.com/posts/a-new-paper-finds-that-a-personal-agent-256a74.json"},"next_reads":[{"type":"topic","path":"/topics/prompt-injection/","url":"https://newruntime.com/topics/prompt-injection/","title":"Prompt Injection","reason":"Explore the prompt-injection topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/prompt-injection.md","json_url":"https://newruntime.com/topics/prompt-injection.json"},{"type":"collection","path":"/posts/","url":"https://newruntime.com/posts/","title":"Field Notes","reason":"Open the latest editorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/posts.json"},{"type":"collection","path":"/source-ledger.json","url":"https://newruntime.com/source-ledger.json","title":"Source Ledger","reason":"Inspect the public source evidence graph.","media_type":"application/json"}]}